Forum for Science, Industry and Business

Sponsored by:     3M 
Search our Site:


Injecting Malicious Code Into HTML5-Based Apps


Scanning 2D barcodes, finding free Wi-Fi access points, sending SMS messages, listening to music, and watching MP4 videos: these are very common activities that we do using our smartphones.

Can you imagine that simply doing these things can get your smarphones infected with "worms" that can not only steal personal information from your phone, but also infect your friends's phones.

Sound scary? It will not be long before worms like this spread among smartphones. What makes the attacks feasible is an emerging technology called HTML5-based app development, and it has been rapidly gaining popularity in the mobile industry.

When the adoption of this technology reaches certain threshold, attacks like this will become quite common, unless we do something to stop it. A recent Gartner report says that by 2016, fifty percent of the mobile apps will be using HTML5-based technologies.

What platforms are affected?

All major mobile systems will be affected, including Android, iOS, Blackberry, Windows Phone, etc., because they all support HTML5-based mobile apps.

A notorious problem of the HTML5-based technology is that malicious code can be easily injected into the program and get executed. That is why the Cross-Site Scripting (XSS) attack is still one of the most common attacks in the Web.

XSS attacks can only target at web applications through a single channel (i.e. the Internet), but with the adoption of the same technology in mobile devices, we have found out that a similar type of attack can not only be launched against mobile apps, it can attack from many channels, including 2D barcode, Wi-Fi scanning, Bluetooth pairing, MP3 songs, MP4 videos, SMS messages, NFC tags, Contact list, etc. As long as an HTML5-based app displays information obtained from outside or from anohter app, it may be a potential victim.

Chris Hittinger | EurekAlert!
Further information:

More articles from Information Technology:

nachricht Laser process simulation available as app for first time
23.11.2015 | Fraunhofer-Institut für Lasertechnik ILT

nachricht Powering the next billion devices with Wi-Fi
19.11.2015 | University of Washington

All articles from Information Technology >>>

The most recent press releases about innovation >>>

Die letzten 5 Focus-News des innovations-reports im Überblick:

Im Focus: Climate study finds evidence of global shift in the 1980s

Planet Earth experienced a global climate shift in the late 1980s on an unprecedented scale, fuelled by anthropogenic warming and a volcanic eruption, according to new research published this week.

Scientists say that a major step change, or ‘regime shift’, in the Earth’s biophysical systems, from the upper atmosphere to the depths of the ocean and from...

Im Focus: Innovative Photovoltaics – from the Lab to the Façade

Fraunhofer ISE Demonstrates New Cell and Module Technologies on its Outer Building Façade

The Fraunhofer Institute for Solar Energy Systems ISE has installed 70 photovoltaic modules on the outer façade of one of its lab buildings. The modules were...

Im Focus: Lactate for Brain Energy

Nerve cells cover their high energy demand with glucose and lactate. Scientists of the University of Zurich now provide new support for this. They show for the first time in the intact mouse brain evidence for an exchange of lactate between different brain cells. With this study they were able to confirm a 20-year old hypothesis.

In comparison to other organs, the human brain has the highest energy requirements. The supply of energy for nerve cells and the particular role of lactic acid...

Im Focus: Laser process simulation available as app for first time

In laser material processing, the simulation of processes has made great strides over the past few years. Today, the software can predict relatively well what will happen on the workpiece. Unfortunately, it is also highly complex and requires a lot of computing time. Thanks to clever simplification, experts from Fraunhofer ILT are now able to offer the first-ever simulation software that calculates processes in real time and also runs on tablet computers and smartphones. The fast software enables users to do without expensive experiments and to find optimum process parameters even more effectively.

Before now, the reliable simulation of laser processes was a job for experts. Armed with sophisticated software packages and after many hours on computer...

Im Focus: Quantum Simulation: A Better Understanding of Magnetism

Heidelberg physicists use ultracold atoms to imitate the behaviour of electrons in a solid

Researchers at Heidelberg University have devised a new way to study the phenomenon of magnetism. Using ultracold atoms at near absolute zero, they prepared a...

All Focus news of the innovation-report >>>



Event News

Fraunhofer’s Urban Futures Conference: 2 days in the city of the future

25.11.2015 | Event News

Gluten oder nicht Gluten? Überempfindlichkeit auf Weizen kann unterschiedliche Ursachen haben

17.11.2015 | Event News

Art Collection Deutsche Börse zeigt Ausstellung „Traces of Disorder“

21.10.2015 | Event News

Latest News

Siemens to supply 126 megawatts to onshore wind power plants in Scotland

27.11.2015 | Press release

Two decades of training students and experts in tracking infectious disease

27.11.2015 | Life Sciences

Coming to a monitor near you: A defect-free, molecule-thick film

27.11.2015 | Materials Sciences

More VideoLinks >>>